$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft File: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft (raw, json) Hash identifier: G1m08jQEEIJaiNbjT8XWOWR1zDpi2U+q4oAjSZpmUbM= Subject key identifier: 86:AB:C8:9B:5D:53:6F:E9:94:06:46:E8:1B:97:5F:BD:91:96:14:B3 Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 3633B20C3A985844C10D7D28404C5227C550FD81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft Manifest number: 4D Signing time: Tue 14 Jul 2026 11:36:09 +0000 Manifest this update: Tue 14 Jul 2026 11:31:09 +0000 Manifest next update: Wed 15 Jul 2026 13:01:09 +0000 Files and hashes: 1: 323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa (hash: 0ip0tR35yLxv7FjOPJ2IKu5phWDauQe0gqBqFSjInGs=) 2: 3231302e322e342e302f32342d3234203d3e203234343039.roa (hash: dsVTcMJyEhqmVODGZAIkGc623cScIW3ZMfG651m2w+c=) 3: 312e322e342e302f32342d3234203d3e203234313531.roa (hash: TBnC2LzR+6Db4WOI7E+8pudN/0AB0HhXouySfw2xuiY=) 4: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl (hash: pezRgnJvWZ7xobAgGavEknOEm2L5Dso5PTf8rqHxnew=) 5: 3231302e322e342e302f32342d3234203d3e203234313531.roa (hash: 4yARnFQIDMpI8ucHC89vUcViaXqG+ksWmochWxcUi2c=) 6: 323030313a6463373a623a3a2f34382d3438203d3e203234313531.roa (hash: nCmmLKf7p/+gDBZjpiG7vY0+piKta/7HzgAV8Daoohw=) 7: 312e322e342e302f32342d3234203d3e203234343039.roa (hash: nEQtgygHVMKG47GK6dkWFFlZukvt0PGUFnlFtUuFZLY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:33:b2:0c:3a:98:58:44:c1:0d:7d:28:40:4c:52:27:c5:50:fd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: Jul 14 11:31:09 2026 GMT Not After : Jul 15 13:01:09 2026 GMT Subject: CN=86ABC89B5D536FE9940646E81B975FBD919614B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:70:cd:14:3b:d8:a7:74:08:3d:ad:d7:e7:2c: 95:67:18:36:ea:d2:db:4d:9c:ca:2e:73:b4:ef:01: 6a:8f:a7:23:84:8e:2c:a9:58:f1:63:a9:8c:29:6f: 2c:54:a2:3e:9b:6c:23:c5:11:c7:36:fe:6c:8e:52: d3:37:a2:72:cf:3f:84:26:67:9e:c6:0d:e8:1b:3f: f3:1c:99:8d:0b:ce:45:fe:6b:4a:82:79:24:d0:98: c9:23:96:5c:30:83:f8:48:6c:33:4d:a4:04:6f:85: f6:86:7f:7a:0e:a7:2e:06:24:e6:f0:30:39:4e:9b: 00:1e:b0:5e:d6:a7:0c:d1:5a:7c:29:b4:bc:9e:99: bc:c0:a5:69:da:a9:04:cc:e9:53:c9:73:e8:be:39: 47:f1:06:56:16:da:5b:6c:49:b3:63:15:34:4e:0d: 2f:21:13:ce:e1:d2:67:d9:e9:f7:fe:f0:84:4e:ef: 40:4e:48:37:09:9f:26:f8:b3:65:33:c1:87:a6:41: 84:1a:5f:39:32:e1:6b:32:a1:31:db:dd:19:f8:16: 87:e3:1c:04:43:95:5e:a4:2d:96:46:88:2b:73:3e: 35:a7:6a:14:82:b0:45:21:f0:24:e9:93:2f:05:8f: 9c:33:c5:6f:a2:1d:5b:27:23:52:9a:77:e0:b7:28: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:C8:9B:5D:53:6F:E9:94:06:46:E8:1B:97:5F:BD:91:96:14:B3 X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:03:2c:07:90:eb:3f:1e:0a:1a:03:8a:99:09:c5:5b:1f:8d: 77:39:04:1a:fe:c1:01:a9:eb:71:44:a8:44:e8:35:13:10:11: 41:cf:82:62:d5:49:dd:4a:d9:20:01:5f:4f:4e:f0:12:29:08: b3:ba:8f:33:78:86:c3:c0:a9:01:fc:4a:dd:f6:58:ee:6c:f3: 00:41:2b:0d:6b:2d:ad:25:50:23:04:28:9e:b3:5f:59:16:d2: 3f:da:45:30:27:fa:19:6f:65:7c:51:2b:a9:b3:d3:64:b0:37: ef:f6:f5:19:7e:83:5a:3d:ac:bf:d8:9f:b8:df:44:30:98:10: f8:74:a3:98:9e:32:c9:1f:e6:aa:a2:02:a9:17:46:11:f7:ef: 50:34:4f:2f:b9:a2:9c:d8:85:b4:50:91:78:3c:7e:ff:30:d2: 64:fc:8e:73:c0:df:ae:9e:c2:40:e5:90:33:b4:7e:50:7a:86: 1a:d7:ca:95:af:a0:a5:e7:de:79:3e:c7:fd:aa:0c:51:a9:05: 71:27:2e:9b:b9:2a:f7:92:a9:9b:d4:4f:ee:66:38:9a:7b:e8: 90:92:93:08:c1:30:9f:c1:40:10:90:39:94:33:73:3b:b3:e2: c0:04:b1:3a:a3:ec:03:dd:a7:a7:87:ed:2f:7a:fd:86:54:93: de:7d:2a:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNjOyDDqYWETBDX0oQExSJ8VQ/YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA3MTQxMTMxMDlaFw0yNjA3MTUxMzAxMDlaMDMxMTAvBgNV BAMTKDg2QUJDODlCNUQ1MzZGRTk5NDA2NDZFODFCOTc1RkJEOTE5NjE0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcM0UO9indAg9rdfnLJVnGDbq 0ttNnMouc7TvAWqPpyOEjiypWPFjqYwpbyxUoj6bbCPFEcc2/myOUtM3onLPP4Qm Z57GDegbP/McmY0LzkX+a0qCeSTQmMkjllwwg/hIbDNNpARvhfaGf3oOpy4GJObw MDlOmwAesF7WpwzRWnwptLyembzApWnaqQTM6VPJc+i+OUfxBlYW2ltsSbNjFTRO DS8hE87h0mfZ6ff+8IRO70BOSDcJnyb4s2UzwYemQYQaXzky4WsyoTHb3Rn4Fofj HARDlV6kLZZGiCtzPjWnahSCsEUh8CTpky8Fj5wzxW+iHVsnI1Kad+C3KMMVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhqvIm11Tb+mUBkboG5dfvZGWFLMwHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkwMDQ3OTY0NTI0MDUyNjcvMC9DRUFDRTY3QjhDNkYy NDU1QkZFQjk1Q0E5N0Y0RUZDRTBEMTBEQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAMsB5DrPx4K GgOKmQnFWx+NdzkEGv7BAanrcUSoROg1ExARQc+CYtVJ3UrZIAFfT07wEikIs7qP M3iGw8CpAfxK3fZY7mzzAEErDWstrSVQIwQonrNfWRbSP9pFMCf6GW9lfFErqbPT ZLA37/b1GX6DWj2sv9ifuN9EMJgQ+HSjmJ4yyR/mqqICqRdGEffvUDRPL7minNiF tFCReDx+/zDSZPyOc8Dfrp7CQOWQM7R+UHqGGtfKla+gpefeeT7H/aoMUakFcScu m7kq95Kpm9RP7mY4mnvokJKTCMEwn8FAEJA5lDNzO7PiwASxOqPsA92np4ftL3r9 hlST3n0q7A== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:33 2026 by rpki-client